[Yahoo-eng-team] [Bug 1641837] Re: neutron-openvswitch-agent failed to add default table

Along yesterday Neutron meeting [1]: 21:05:22 when reviewing stable patches or triaging bug reports 21:05:34 please take into account of the fact that mitaka is security fixes only -> This is not a security issue IMO, so setting it to "won't fix". [1]

[Yahoo-eng-team] [Bug 1641842] [NEW] Glance installation does not appear to detect admin role

Public bug reported: Issue seen on Openstack Newton on Ubuntu 16.04 openstack --debug image create "cirros" --file cirros-0.3.4-x86_64-disk.img --disk-format qcow2 --container-format bare --public START with options: [u'--debug', u'image', u'create', u'cirros', u'--file',

[Yahoo-eng-team] [Bug 1641842] [NEW] Glance installation does not appear to detect admin role

You have been subscribed to a public bug: Issue seen on Openstack Newton on Ubuntu 16.04 openstack --debug image create "cirros" --file cirros-0.3.4-x86_64-disk.img --disk-format qcow2 --container-format bare --public START with options: [u'--debug', u'image', u'create', u'cirros',

[Yahoo-eng-team] [Bug 1641837] [NEW] neutron-openvswitch-agent failed to add default table

Public bug reported: Problem After power down and power off the host, the tenant network is not available. The cause is that default flow tables of br-int is not setup successfully when neutron-openvswitch-agent.starts: 1) The neutron-openvswitch-agent fails to add the flow table 0 but

[Yahoo-eng-team] [Bug 1641830] [NEW] Missing RAM units in Launch instance Wizard

Public bug reported: Small usability issue: No units of RAM are displayed. 1. Open the Launch Instance Wizard 2. Go to Flavor step 3. Expand drawer of any Flavor. Expected result: Should be able to see an unit of RAM, e.g. MB or GB. ** Affects: horizon Importance: Undecided

[Yahoo-eng-team] [Bug 1641821] [NEW] admin guide: Cleanup LDAP

Public bug reported: There exist three different documents [1] related to LDAP in the admin- guide [2]. They should be collapsed into one. Further, they recommend deploying a single backend LDAP, which is not what the keystone team recommends. [1] 1) identity-integrate-with-ldap.rst 2)

[Yahoo-eng-team] [Bug 1641822] [NEW] admin guide: create a PCI section

Public bug reported: A section dedicated to PCI should be created in the admin guide [1]. The content can largely come from our developer docs [2], but should be modified for a deployer in mind. [1] https://github.com/openstack/openstack-manuals/tree/master/doc/admin-guide/source [2]

[Yahoo-eng-team] [Bug 1641823] [NEW] Config reference: add PCI options

Public bug reported: Add configuration options to the config reference [1]. [1] https://github.com/openstack/openstack-manuals/tree/master/doc/config-reference/source/identity ** Affects: keystone Importance: Low Status: New ** Tags: documentation -- You received this bug

[Yahoo-eng-team] [Bug 1641818] [NEW] admin guide: update caching document

Public bug reported: The caching document in the admin guide is sorely out of date by at least 2 releases. Update it to reflect current status. http://docs.openstack.org/admin-guide/identity-caching-layer.html ** Affects: keystone Importance: Low Assignee: Eric Brown (ericwb)

[Yahoo-eng-team] [Bug 1641814] [NEW] Don't apply multi-queue to SRIOV ports

Public bug reported: The multi-queue feature was added: https://blueprints.launchpad.net/nova/+spec/libvirt-virtio-net-multiqueue and it is controlled using image metadata: hw_vif_mutliqueue_enabled=true|false when it is set to be true, the related xml config will be handled:

[Yahoo-eng-team] [Bug 1641816] [NEW] enable ``cache_on_issue`` by default

Public bug reported: keystone provides a configuration option to "pre-cache" a token, it is cached upon issue. In the Newton release this was disabled by default, we should enable it in Ocata. ** Affects: keystone Importance: Medium Assignee: Matt Fischer (mfisch) Status: In

[Yahoo-eng-team] [Bug 1641813] [NEW] stable/newton branch creation request for networking-odl

Public bug reported: Please create stable/newton branch of networking-odl on f313b7f5b3ebba5bd6f7e8e855315e1570c71f54 the corresponding patch for openstack/release can be found at https://review.openstack.org/#/c/395415/ ** Affects: networking-odl Importance: High Assignee: Isaku

[Yahoo-eng-team] [Bug 1641811] [NEW] Wrong ha_state, when l3-agent that host the master router is down

Public bug reported: In an L3 HA Setup with multiple network nodes, we can query the agent hosting the Master HA router via l3-agent-list-hosting-router. root@node1:~# neutron l3-agent-list-hosting-router demo-router

[Yahoo-eng-team] [Bug 1641808] [NEW] neutron net-create VlanTransparencyDriverError "Backend does not support VLAN Transparency"

Public bug reported: PackStack N Version When I create a vlan-transparent network, it returns Error. I can create a none-vlan-transparent network, it's OK. [root@controller ~(keystone_admin)]# neutron net-create --vlan-transparent True vlan_transparent_net Backend does not support VLAN

[Yahoo-eng-team] [Bug 1641808] [NEW] neutron net-create VlanTransparencyDriverError "Backend does not support VLAN Transparency"

You have been subscribed to a public bug: PackStack N Version When I create a vlan-transparent network, it returns Error. I can create a none-vlan-transparent network, it's OK. [root@controller ~(keystone_admin)]# neutron net-create --vlan-transparent True vlan_transparent_net Backend does not

[Yahoo-eng-team] [Bug 1641788] [NEW] AgentStatusCheckWorker doesn't reset or start after stop

Public bug reported: The AgentStatusCheckWorker we have in tree doesn't correctly recover if the .stop() or .reset() methods are called to it due to some bad conditionals. This doesn't currently impact the in-tree use-case since we don't stop and restart the status checkers, but it should be

[Yahoo-eng-team] [Bug 1632884] Re: Missing a slaac ipv6 address mode

Reviewed: https://review.openstack.org/386121 Committed: https://git.openstack.org/cgit/openstack/horizon/commit/?id=f047962e7572f40116afb834b35d976a0fdc434e Submitter: Jenkins Branch:master commit f047962e7572f40116afb834b35d976a0fdc434e Author: Ying Zuo Date: Wed Oct

[Yahoo-eng-team] [Bug 1641753] [NEW] Feature support matrix should list support for force-completing a live migration

Public bug reported: The feature support matrix has a section for virt drivers that support live migration: http://docs.openstack.org/developer/nova/support- matrix.html#operation_live_migrate But the 2.22 microversion added support for forcefully completing a live migration:

[Yahoo-eng-team] [Bug 1597686] Re: the return value in func process_request in nova/wsgi.py is not proper

I see the above method is present in the base class of Middleware. Currently, Nova doesn't implement any middleware which overrides the above method. In future it might be helpful if any middlewares are developed specific to nova. This doesn't seem to be a valid bug for me. Hence invalidating it.

[Yahoo-eng-team] [Bug 1641750] [NEW] PCI devices are sometime not freed after a migration

Public bug reported: Description === During stress testing of cold migration, it has been observed that sometimes the PCI devices are not freed by the resource tracker on the source node. If on the source node the periodic resource audit kicks-in in the middle of the migration, the

[Yahoo-eng-team] [Bug 1634258] Re: Errors in the upstream OVS Python IDL lib are not logged anywhere

Reviewed: https://review.openstack.org/387672 Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=93104d3d703153cb99d67dfe62097f8332d1af97 Submitter: Jenkins Branch:master commit 93104d3d703153cb99d67dfe62097f8332d1af97 Author: Terry Wilson Date:

[Yahoo-eng-team] [Bug 1641713] [NEW] There is no api-ref for 2.24 and aborting a live migration

Public bug reported: This change added the 2.24 microversion for aborting a live migration: https://review.openstack.org/#/c/277971/ However, we don't have any API reference for a DELETE action on a migration resource: http://developer.openstack.org/api-ref/compute/?expanded=migrate-server-

[Yahoo-eng-team] [Bug 1637530] Re: Python keystone client `users` method get() is not working

Reviewed: https://review.openstack.org/396260 Committed: https://git.openstack.org/cgit/openstack/python-keystoneclient/commit/?id=0bfd6251b674c998680ee0018fc95f47e1d26fe6 Submitter: Jenkins Branch:master commit 0bfd6251b674c998680ee0018fc95f47e1d26fe6 Author: Boris Bobrov

[Yahoo-eng-team] [Bug 1621200] Re: password created_at does not honor timezones

** Changed in: keystone/newton Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/1621200 Title: password created_at does

[Yahoo-eng-team] [Bug 1641670] [NEW] Functional reload tests are flakey

Public bug reported: http://logs.openstack.org/periodic-stable/periodic-glance-python27-db- newton/95226d2/testr_results.html.gz is an example of a periodic gate failure in Glance's functional test suite, specifically: glance.tests.functional.test_reload.TestReload.test_reload This test fails

[Yahoo-eng-team] [Bug 1629133] Re: New neutron subnet pool support breaks multinode testing.

** Also affects: bgpvpn Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1629133 Title: New neutron subnet pool support breaks multinode

[Yahoo-eng-team] [Bug 1629133] Re: New neutron subnet pool support breaks multinode testing.

** Also affects: neutron Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1629133 Title: New neutron subnet pool support breaks multinode

[Yahoo-eng-team] [Bug 1641660] [NEW] enable CADF notification format by default

Public bug reported: The current default notification format is the home-brewed openstack- styled format, that provides minimal information about the user. For a few releases now, all new notifications have adhered to the CADF format. We should switch over to the CADF format, which provides

[Yahoo-eng-team] [Bug 1641654] [NEW] include healthcheck middleware by default

Public bug reported: The healthcheck middleware is published by oslo, used in glance and magnum, and one less thing for deployers to add to keystone. Let's add it in. Patch: https://review.openstack.org/#/c/387731/ ** Affects: keystone Importance: Medium Assignee: Jesse Keating

[Yahoo-eng-team] [Bug 1641652] [NEW] cache invalidation should be wrapped to local context

Public bug reported: When [1] merged, it fixed many caching issues and bug, but created another. The region invalidation should be wrapped to the local context. Patch: https://review.openstack.org/#/c/380376/ ** Affects: keystone Importance: High Assignee: Boris Bobrov (bbobrov)

[Yahoo-eng-team] [Bug 1641642] [NEW] users that are blacklisted for PCI support should not have failed login attempts counted

Public bug reported: The main idea behind the user ID blacklist for PCI was to allow service accounts to not have to change their password. As noted in [1], a by- product of any PCI implementation is a vulnerability to a DoS (a malicious user attempting to login X times and locking out a user).

[Yahoo-eng-team] [Bug 1641645] [NEW] PCI: a locked out user must ask an admin to unlock their account

Public bug reported: As noted in the bug title, this is a cumbersome process, a user should be able to reset their password if it expired. (and potentially if locked out -- that's up for debate). ** Affects: keystone Importance: Medium Status: New ** Tags: pci -- You received

[Yahoo-eng-team] [Bug 1641639] [NEW] use mapping_id for shadow users

Public bug reported: Currently, shadow users are created for users that log in through federation. New "local_user" accounts are created with a new UUID. Rather than creating a new UUID, we should re-use the mapping_id backend that was employed with LDAP users. ** Affects: keystone

[Yahoo-eng-team] [Bug 1638681] Re: resource tracker sets wrong max_unit in placement Inventory

Reviewed: https://review.openstack.org/395971 Committed: https://git.openstack.org/cgit/openstack/nova/commit/?id=00bc0cb53d6113fae9a7714386953d1d75db71c1 Submitter: Jenkins Branch:master commit 00bc0cb53d6113fae9a7714386953d1d75db71c1 Author: Prateek Arora Date: Thu

[Yahoo-eng-team] [Bug 1641621] [NEW] keystone-manage doctor needs tests

Public bug reported: there are no tests for any keystone-manage doctor commands. they should be created here: https://github.com/openstack/keystone/blob/master/keystone/tests/unit/test_cli.py ** Affects: keystone Importance: Low Status: Triaged ** Tags: test-improvement -- You

[Yahoo-eng-team] [Bug 1641623] [NEW] keystone-manage doctor needs developer docs

Public bug reported: There are no developer docs on how to create a new doctor check, or how the existing ones work. They should be added to a new section in the "developer docs" here: http://docs.openstack.org/developer/keystone /#developers-documentation ** Affects: keystone Importance:

[Yahoo-eng-team] [Bug 1641625] [NEW] RFE: add more info in the k2k assertion

Public bug reported: Currently, the user's name (and domain name), their roles, the project they authenticated with (and project's domain name) are supplied in the k2k assertion that keystone generates. There has been a request that the user's groups also be included in the assertion. **

[Yahoo-eng-team] [Bug 1351144] Re: neutron, divergence in behavior wrt floatingips and l3 routers

** Project changed: neutron => mos -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1351144 Title: neutron, divergence in behavior wrt floatingips and l3 routers Status in Juniper

[Yahoo-eng-team] [Bug 1641331] Re: server metadata PUT request details are wrong

Reviewed: https://review.openstack.org/396867 Committed: https://git.openstack.org/cgit/openstack/nova/commit/?id=633c817de5a67e798d8610d0df1135e5a568fd8a Submitter: Jenkins Branch:master commit 633c817de5a67e798d8610d0df1135e5a568fd8a Author: Matt Riedemann Date: Sat

[Yahoo-eng-team] [Bug 1351144] Re: neutron, divergence in behavior wrt floatingips and l3 routers

** Project changed: mos => neutron -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1351144 Title: neutron, divergence in behavior wrt floatingips and l3 routers Status in Juniper

[Yahoo-eng-team] [Bug 1635306] Re: After newton deployment _member_ role is missing in keystone

This works in the last Newton deployment I did, the keystone patch is sufficient to help with this. Thanks again for the fix! ** Changed in: tripleo Status: Triaged => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed

[Yahoo-eng-team] [Bug 1351144] [NEW] neutron, divergence in behavior wrt floatingips and l3 routers

You have been subscribed to a public bug: From: Rahul Sharma Date: Friday, August 1, 2014 at 1:17 AM To: Sachin Bansal Cc: Contrail Systems Configuration Team , Vedamurthy Ananth Joshi Subject: Re:

[Yahoo-eng-team] [Bug 1082248] Re: Use uuidutils instead of uuid.uuid4()

Reviewed: https://review.openstack.org/394883 Committed: https://git.openstack.org/cgit/openstack/horizon/commit/?id=796625863d7e3de7882dad5bb7b1c66025c61344 Submitter: Jenkins Branch:master commit 796625863d7e3de7882dad5bb7b1c66025c61344 Author: jolie Date: Tue Nov

[Yahoo-eng-team] [Bug 1361235] Re: visit horizon failure because of import module failure

** Changed in: openstack-ansible Status: In Progress => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Dashboard (Horizon). https://bugs.launchpad.net/bugs/1361235 Title: visit horizon failure

[Yahoo-eng-team] [Bug 1508442] Re: LOG.warn is deprecated

** Changed in: mistral Assignee: Sharat Sharma (sharat-sharma) => (unassigned) ** Changed in: mistral Status: In Progress => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Compute (nova).

[Yahoo-eng-team] [Bug 1641535] [NEW] FIP failed to remove in router's standby node

Public bug reported: ENV 1. Server side: enable router_distributed and l3_ha 2. Agent side: all L3 agent mode is dvr_snat (include network nodes and compute nodes) How to reprocude: = associate floatingip --> disassociate floatingip --> reassociate